Technical
API and Webhooks
Store API endpoints, webhook verification, common sync failure scenarios, and how to troubleshoot integration issues.
1 min read
Canonical endpoints
The production integration origin is https://whitelabel.peptidetech.is. The existing /api/v1 namespace is retained for compatible merchant endpoints, while store endpoints continue under /v1 where documented.
Store requests use V2 HMAC over method, canonical path, body digest, timestamp, nonce, store ID, and credential version. Provider webhooks use their provider-specific signature, raw-body verification, timestamp window, replay key, redacted retention, and reconciliation state.
Do not redirect signed POST requests across hosts. A wrong-host state-changing request is rejected, and the retired integration host returns 410 after the migration window.
Research-use only. The portal, invoice, and lot certificate are the current-state records. Marketing copy is not a guarantee of inventory, timing, or eligibility.